2022

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

Online Railway Reservation System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /

A vulnerability was found in Hindu Matrimonial Script. It has been declared as critical. Affected by this vulnerability

In Mahara 21.04 before 21.04.6, 21.10 before 21.10.4, and 22.04.2, files can sometimes be downloaded through thumb.php w

Buffer Over-read in function grab_file_name in GitHub repository vim/vim prior to 8.2.4956. This vulnerability is capabl

There is a stack-overflow at ecma-helpers.c:326 in ecma_get_lex_env_type in JerryScript 2.4.0

There is a heap-use-after-free at ecma-helpers-string.c:1940 in ecma_compare_ecma_non_direct_strings in JerryScript 2.4.

The Allow svg files WordPress plugin before 1.1 does not properly validate uploaded files, which could allow high privil

An uncontrolled search path vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allow

Improper privilege management vulnerability in McAfee Consumer Product Removal Tool prior to version 10.4.128 could allo

The Very Simple Contact Form WordPress plugin before 11.6 exposes the solution to the captcha in the rendered contact fo

The WP-EMail WordPress plugin before 2.69.0 prioritizes getting a visitor's IP from certain HTTP headers over PHP's REMO

The Better Find and Replace WordPress plugin before 1.3.6 does not properly sanitise, validate and escape various parame

ASUS Control Center is vulnerable to SQL injection. An authenticated remote attacker with general user privilege can inj

ASUS Control Center API has a broken access control vulnerability. An unauthenticated remote attacker can call privilege

NHI’s health insurance web service component has insufficient validation for input string length, which can result in he

An issue was discovered in TitanFTP (aka Titan FTP) NextGen before 1.2.1050. When installing, Microsoft SQL Express 2019

Out-of-bounds Write in GitHub repository vim/vim prior to 8.2.

Out-of-bounds Read in GitHub repository vim/vim prior to 8.2.

Heap-based Buffer Overflow in GitHub repository vim/vim prior to 8.2.

Buffer Over-read in GitHub repository vim/vim prior to 8.2.

A vulnerability was found in FFmpeg 2.0. It has been rated as critical. Affected by this issue is the function lag_decod

A vulnerability has been found in FFmpeg 2.0 and classified as critical. This vulnerability affects the function decode_

A vulnerability classified as critical was found in FFmpeg 2.0. This vulnerability affects the function rpza_decode_stre

A vulnerability classified as critical has been found in FFmpeg 2.0. Affected is the function read_var_block_data. The m

The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the

All versions of package pg-native; all versions of package libpq are vulnerable to Denial of Service (DoS) when the addo

All versions of package @discordjs/opus are vulnerable to Denial of Service (DoS) when trying to encode using an encoder

All versions of package fast-string-search are vulnerable to Denial of Service (DoS) when computations are incorrect for

This affects all versions of package mout. The deepFillIn function can be used to 'fill missing properties recursively',

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to version

Versions of the Amazon AWS Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3.5 are affected by a ra

A permission issue affects users that deployed the shipped version of the Checkmk Debian package. Packages created by th

Grafana 8.4.3 allows unauthenticated access via (for example) a /dashboard/snapshot/*?orgId=0 URI. NOTE: the vendor cons

Improper Neutralization of Formula Elements in a CSV File in GitHub repository inventree/inventree prior to 0.7.2.

Unrestricted Upload of File with Dangerous Type in GitHub repository inventree/inventree prior to 0.7.2.

ASG technologies ( A Rocket Software Company) ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to C

Memory leaks in LazyPRM.cpp of OMPL v1.5.0 can cause unexpected behavior.

A vulnerability classified as critical was found in GE Voluson S8. Affected is the underlying Windows XP operating syste

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/ztliuyan_sendmail.php (when the

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendsms.php (when the attacker h

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/deluser.php (when the attacker h

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_download.php (when the attack

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /user/dls_print.php (when the attacker

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/showbad.php (when the attacker h

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /admin/dl_sendmail.php (when the attack

An issue was discovered in zzcms 2019. There is a SQL injection Vulnerability in /dl/dl_sendmail.php (when the attacker

An issue was found on TRENDnet TEW-831DR 1.0 601.130.1.1356 devices. The default pre-shared key for the Wi-Fi networks i